Enforcing CRD-based policies